Scribd
Upload
85 views1 page

Overview of Security Management Models

Security Management Models are frameworks that establish policies and best practices for securing systems and data. They include various types such as Access Control Models, Integrity Models, Confidentiality Models, Risk Management Models, and Security Policy Models, each with specific methodologies for managing security risks. These models guide organizations in enforcing access controls and maintaining data integrity and confidentiality.

Uploaded by

amittimalsina999
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
85 views1 page

Overview of Security Management Models

Security Management Models are frameworks that establish policies and best practices for securing systems and data. They include various types such as Access Control Models, Integrity Models, Confidentiality Models, Risk Management Models, and Security Policy Models, each with specific methodologies for managing security risks. These models guide organizations in enforcing access controls and maintaining data integrity and confidentiality.

Uploaded by

amittimalsina999
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd

Security Management Models are frameworks that define policies, rules, and best practices for

securing systems, data, and networks. These models guide organizations in managing security
risks and enforcing access controls.

Types of Security Management Models

1. Access Control Models (Restricting User Access)

 Discretionary Access Control (DAC) – The owner of data decides who gets access (e.g., Windows
file permissions).
 Mandatory Access Control (MAC) – Access is strictly controlled by system policies (e.g., military
security levels).
 Role-Based Access Control (RBAC) – Access is assigned based on user roles (e.g., admin,
employee, guest).
 Attribute-Based Access Control (ABAC) – Access is granted based on attributes like location,
device, or time.

2. Integrity Models (Ensuring Data Integrity)

 Biba Model – Prevents unauthorized modification by enforcing "No Write Up, No Read Down"
rules.
 Clark-Wilson Model – Uses well-formed transactions and separation of duties to ensure
integrity.

3. Confidentiality Models (Protecting Sensitive Information)

 Bell-LaPadula Model – Ensures confidentiality using "No Read Up, No Write Down" rules (used
in government security).

4. Risk Management Models (Identifying & Mitigating Risks)

 NIST Cybersecurity Framework – Guidelines for managing cybersecurity risks.


 ISO/IEC 27001 – International standard for information security management.
 COBIT (Control Objectives for Information and Related Technologies) – Governance and
management of IT security.

5. Security Policy Models (Defining Security Rules)

 Graham-Denning Model – Defines rules for creating/deleting subjects and objects in a system.
 Harrison-Ruzzo-Ullman (HRU) Model – Focuses on access rights and their modification.

You might also like